gitea: migrate to envFrom with per-container InfisicalSecrets

Flat CR narrowed to recursive: false; it still serves the SMB mount credentials and the Actions runner token, which the runner Helm chart reads via existingSecret.
2026-08-24 00:20:29 +02:00
parent 079830a8ff
commit 0177c73fa9
5 changed files with 59 additions and 50 deletions
@@ -17,7 +17,9 @@ spec:
        projectSlug: "kubernetes"
        envSlug: "prod"
        secretsPath: "/gitea"
-        recursive: true
+        # Root only: /gitea holds the SMB mount credentials and the Actions runner token.
+        # Per-container env lives in subfolders.
+        recursive: false
  managedSecretReference:
    secretName: gitea-secrets
    secretNamespace: gitea